CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d24759dd09f56a5fb2063227b3ed70fad21166aee6d070af78a05f33920b770c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d24759dd09f56a5fb2063227b3ed70fad21166aee6d070af78a05f33920b770c.dll
Resource
win10v2004-20220812-en
Target
d24759dd09f56a5fb2063227b3ed70fad21166aee6d070af78a05f33920b770c
Size
63KB
MD5
0b740624179d98cabcb3d40614e9ad84
SHA1
d6f063c4340c30235d87b9819c9c2bad11c5548d
SHA256
d24759dd09f56a5fb2063227b3ed70fad21166aee6d070af78a05f33920b770c
SHA512
43a30b23abcb68b8748253e66e50b93f4d9c35435bc2bd08e56fe845ff04e56b9a8964be34bd6d8c592413db51bd55efabd1908a4bab69da117b5fe37db74d0c
SSDEEP
1536:grl1KpEMo2IzKHZ3eGQxonnXBebLG/3AVwy/UXG10TM:grlpn3ud5QxoXB6iIVV/U2mM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ